7.2
Élevée
CVE-2024-25612 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Description
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | Versions non publiées | |
| arubaos 6.5 | 6.5.4.0 → < 6.5.5.0 | 6.5.5.0 |
| sd-wan 8.6 | 8.6.0.4 → < 8.7.0.0 | 8.7.0.0 |
Autres CVE de ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
Les 7 CVE de ArubaOS Wi-Fi Controllers and Campus/Remote Access Points →
CVE-2024-25616
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in…
3.7
Faible
CVE-2024-25615
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol…
5.3
Moyenne
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS
5.5
Moyenne
CVE-2024-25613
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
Élevée